don't verify at all (#232)

Watfaq · Dec 27, 2023 · f76ef2e · f76ef2e
1 parent bac57d3
commit f76ef2e
Showing 1 changed file with 20 additions and 2 deletions.
diff --git a/clash_lib/src/common/tls.rs b/clash_lib/src/common/tls.rs
@@ -1,7 +1,7 @@
 use once_cell::sync::Lazy;
 use rustls::{
-    client::{ServerCertVerified, ServerCertVerifier, WebPkiVerifier},
-    OwnedTrustAnchor, RootCertStore,
+    client::{HandshakeSignatureValid, ServerCertVerified, ServerCertVerifier, WebPkiVerifier},
+    DigitallySignedStruct, OwnedTrustAnchor, RootCertStore,
 };
 use tracing::warn;
 
@@ -38,6 +38,24 @@ impl ServerCertVerifier for DummyTlsVerifier {
     ) -> Result<ServerCertVerified, rustls::Error> {
         Ok(ServerCertVerified::assertion())
     }
+
+    fn verify_tls12_signature(
+        &self,
+        _message: &[u8],
+        _cert: &Certificate,
+        _dss: &DigitallySignedStruct,
+    ) -> Result<HandshakeSignatureValid, rustls::Error> {
+        Ok(HandshakeSignatureValid::assertion())
+    }
+
+    fn verify_tls13_signature(
+        &self,
+        _message: &[u8],
+        _cert: &Certificate,
+        _dss: &DigitallySignedStruct,
+    ) -> Result<HandshakeSignatureValid, rustls::Error> {
+        Ok(HandshakeSignatureValid::assertion())
+    }
 }
 
 pub struct NoHostnameTlsVerifier;